The Occupational Safety and Health Administration — the US federal agency under the Department of Labor that sets and enforces workplace safety and health standards, with broad authority covering most private-sector employers and significant penalty schedules for violations.
OSHA (Occupational Safety and Health Administration) is the US federal agency under the Department of Labor responsible for setting and enforcing workplace safety and health standards. Created by the Occupational Safety and Health Act of 1970, OSHA has broad authority over most private-sector employers and their workers, with the mission to assure 'safe and healthful working conditions for working men and women'. For US HR teams, OSHA compliance affects every aspect of workplace operations from physical premises and equipment to recordkeeping, training, and incident reporting.
**Coverage.** OSHA covers most US private-sector employers regardless of size, with limited exceptions for self-employed workers, federal-government employees (covered by separate federal-employee programs), and certain state-and-local-government employees. Federal-employer-government coverage runs through agency-level programs. State-and-local-government employees are covered by state OSHA plans where they exist — 28 states have approved state OSHA programs covering both public and private sectors. Multi-state employers must comply with both federal OSHA and any applicable state-specific programs.
**The General Duty Clause.** Section 5(a)(1) of the OSH Act, the General Duty Clause, requires every covered employer to provide each worker 'employment and a place of employment which are free from recognized hazards that are causing or are likely to cause death or serious physical harm'. The Clause creates a baseline obligation even where no specific OSHA standard addresses a particular hazard. To establish a General Duty Clause violation, OSHA must show (1) a hazard existed, (2) the hazard was recognised in the industry, (3) the hazard was likely to cause death or serious harm, (4) feasible abatement existed.
**Specific OSHA standards.** Beyond the General Duty Clause, OSHA has issued specific standards addressing recognised hazards. Major categories include (1) **Personal Protective Equipment (PPE)** — hard hats, safety glasses, gloves, hearing protection, respiratory protection. (2) **Fall protection** — guardrails, safety nets, personal fall-arrest systems for elevated work. (3) **Hazard Communication** — chemical safety, GHS labelling, Safety Data Sheets, training. (4) **Electrical safety** — lockout-tagout procedures, electrical-equipment standards. (5) **Ergonomics** — though general ergonomics standards have been politically contested, specific industries have detailed standards. (6) **Bloodborne pathogens** — for healthcare and other workers exposed to blood. (7) **Confined spaces** — specific procedures for entry into tanks, silos, and other confined areas. (8) **Process safety management** — for facilities handling highly hazardous chemicals. (9) **Walking-working surfaces** — floor and surface safety. (10) **Recordkeeping** — Form 300/301/300A injury and illness tracking. Specific standards exist for industries including construction, agriculture, maritime, and longshoring with industry-tailored requirements.
**Recordkeeping requirements.** Employers with 11 or more employees must record work-related injuries and illnesses (with limited industry exceptions for low-hazard sectors). The standard recordkeeping documents are (1) **OSHA Form 300 (Log of Work-Related Injuries and Illnesses)** — running log of recordable incidents during the year. (2) **OSHA Form 301 (Injury and Illness Incident Report)** — detailed individual incident report. (3) **OSHA Form 300A (Summary)** — annual summary that must be posted in the workplace from February 1 through April 30 of the following year. Recordable incidents include any injury or illness resulting in death, days away from work, restricted work or job transfer, medical treatment beyond first aid, loss of consciousness, or significant injury or illness diagnosed by a healthcare professional. Records must be retained for 5 years.
**Electronic submission.** Workplaces with 250 or more employees, or 20-249 employees in industries identified as high-hazard, must electronically submit injury and illness data through the Injury Tracking Application annually. Submission deadlines are March 2 each year for prior-year data. The data is publicly available, supporting research and worker access to safety information across employers.
**OSHA inspections.** OSHA conducts inspections triggered by various circumstances. (1) **Imminent danger** — situations where there is a reasonable certainty death or serious physical harm could occur immediately. (2) **Catastrophes and fatalities** — work-related fatalities must be reported to OSHA within 8 hours; in-patient hospitalisations, amputations, and eye losses within 24 hours. (3) **Worker complaints** — confidential complaints from workers can trigger inspections. (4) **Programmed inspections** — targeted inspection programs in high-hazard industries. (5) **Referrals** — from other agencies, news reports, or other sources. (6) **Follow-ups** — to verify abatement of previously cited violations. Inspections involve opening conference, walkaround, employee interviews, and closing conference. Citations and penalties are issued for any violations identified.
**Penalty structure.** OSHA penalties (2025 figures, adjusted annually for inflation) include (1) **Other-than-serious** — up to $16,131 per violation. (2) **Serious** — up to $16,131 per violation. (3) **Willful or repeated** — up to $161,323 per violation. (4) **Failure to abate** — up to $16,131 per day past the abatement date. Penalties accumulate per violation and per day, with major incidents producing multi-million-dollar penalties. Beyond direct OSHA penalties, citations create reputational damage, increased workers' compensation premiums, and potential personal-injury litigation exposure.
**Multi-state and state-plan considerations.** Employers operating in states with their own OSHA plans (California Cal/OSHA, Michigan MIOSHA, Oregon OR-OSHA, etc.) must comply with state-specific standards which often exceed federal requirements. California's Cal/OSHA has particularly stringent rules including its own ergonomics standard, heat-illness prevention standard, and reporting requirements. State plans may have shorter incident-reporting timelines, broader recordkeeping, and stricter penalty schedules.
**Whistleblower protection.** OSHA's whistleblower program protects workers who report safety concerns from retaliation. Section 11(c) of the OSH Act prohibits termination, discipline, or other adverse action against workers for reporting hazards or filing complaints. OSHA has expanded whistleblower protections to cover dozens of other federal laws including securities, environmental, and trucking regulations. Retaliation claims often produce substantial damages and attorneys' fees.
**Workplace safety programs.** Best-practice US employers operate documented safety programs including (1) Written safety policies and procedures. (2) Hazard identification and assessment. (3) Worker training including new-hire orientation and ongoing refreshers. (4) PPE programs with proper fit-testing and replacement schedules. (5) Incident investigation procedures. (6) Safety committees with worker representation. (7) Periodic safety audits and inspections. (8) Management commitment visible in policy, resource allocation, and personal involvement. Programs aligned with the Recommended Practices for Safety and Health Programs (the OSHA-published framework) provide both compliance protection and genuine workplace safety improvement.
**Common compliance traps.** First, inadequate hazard communication training for chemical handlers. Second, missing or incomplete OSHA 300 logs. Third, failing to report fatalities within 8 hours or in-patient hospitalisations within 24 hours. Fourth, neglecting state-plan requirements that exceed federal OSHA. Fifth, retaliating against workers raising safety concerns. Sixth, treating safety as IT or facility management rather than HR-and-line-manager responsibility.
**Automation through Peoplifi.** Peoplifi supports OSHA compliance with electronic OSHA 300/301 logging, automated 300A summary generation for annual posting, incident-reporting workflows aligned with the 8-hour fatality and 24-hour serious-incident timelines, training-record tracking for OSHA-required topics, and ergonomic-assessment workflows for remote and in-office staff.
We post the OSHA 300A summary in the break room each February and offer ergonomic assessments for our remote and in-office staff.
Peoplifi unifies HR, payroll, time tracking, and performance into one modern platform — so concepts like OSHA stay handled, not stuck in spreadsheets.
Start free 14-day trial